@imgly/codesign-mcp 0.1.0

package/dist/gateway/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/gateway/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AAEpB,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AAQrE,MAAM,OAAO,kBAAkB;IAC7B,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEhE,qDAAqD;IACrD,IAAI,SAAS;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,oBAAoB,CAC5B,qHAAqH,CACtH,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,CACf,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YACzB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBAC3B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,WAAW,CAC2B,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;CACF","sourcesContent":["import {\n  type GatewayClient,\n  GatewayDisabledError,\n  type GenerateImageInput,\n  type GenerateImageOutput\n} from './types.js';\n\nconst DEFAULT_ENDPOINT = 'https://gateway.img.ly/v1/images/generate';\n\nexport interface LocalGatewayClientOptions {\n  apiKey: string | undefined;\n  endpoint?: string;\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class LocalGatewayClient implements GatewayClient {\n  constructor(private readonly opts: LocalGatewayClientOptions) {}\n\n  /** Available only when an `API_KEY` was provided. */\n  get available(): boolean {\n    return Boolean(this.opts.apiKey);\n  }\n\n  async generateImage(input: GenerateImageInput): Promise<GenerateImageOutput> {\n    if (!this.opts.apiKey) {\n      throw new GatewayDisabledError(\n        'asset generation is disabled: set `API_KEY` (your IMG.LY gateway key) to enable. See `handbook` → `asset_generate`.'\n      );\n    }\n    const f = this.opts.fetch ?? globalThis.fetch;\n    const res = await f(this.opts.endpoint ?? DEFAULT_ENDPOINT, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${this.opts.apiKey}`,\n        'content-type': 'application/json'\n      },\n      body: JSON.stringify({\n        prompt: input.prompt,\n        width: input.width,\n        height: input.height\n      })\n    });\n    if (!res.ok) {\n      throw new Error(\n        `asset_generate: gateway returned ${res.status} ${res.statusText}`\n      );\n    }\n    const ct = res.headers.get('content-type') ?? 'image/png';\n    const bytes = new Uint8Array(await res.arrayBuffer());\n    const mimeType = (\n      ct.startsWith('image/jpeg')\n        ? 'image/jpeg'\n        : ct.startsWith('image/webp')\n          ? 'image/webp'\n          : 'image/png'\n    ) as 'image/png' | 'image/jpeg' | 'image/webp';\n    return { bytes, mimeType };\n  }\n}\n"]}

package/dist/gateway/types.d.ts

@@ -0,0 +1,24 @@
+export interface GenerateImageInput {
+    prompt: string;
+    width?: number;
+    height?: number;
+}
+export interface GenerateImageOutput {
+    /** Raw image bytes (PNG). */
+    bytes: Uint8Array;
+    mimeType: 'image/png' | 'image/jpeg' | 'image/webp';
+}
+export interface GatewayClient {
+    /**
+     * Whether the gateway can actually fulfil a generation request right now
+     * (e.g. Local has an `API_KEY`). Callers use this to decide whether to
+     * expose the `asset_generate` tool at all — an unavailable gateway means
+     * the tool is hidden from `tools/list` rather than offered and then failing.
+     */
+    readonly available: boolean;
+    generateImage(input: GenerateImageInput): Promise<GenerateImageOutput>;
+}
+export declare class GatewayDisabledError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/gateway/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;CACrD;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxE;AAED,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/gateway/types.js

@@ -0,0 +1,7 @@
+export class GatewayDisabledError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GatewayDisabledError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/gateway/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF","sourcesContent":["export interface GenerateImageInput {\n  prompt: string;\n  width?: number;\n  height?: number;\n}\n\nexport interface GenerateImageOutput {\n  /** Raw image bytes (PNG). */\n  bytes: Uint8Array;\n  mimeType: 'image/png' | 'image/jpeg' | 'image/webp';\n}\n\nexport interface GatewayClient {\n  /**\n   * Whether the gateway can actually fulfil a generation request right now\n   * (e.g. Local has an `API_KEY`). Callers use this to decide whether to\n   * expose the `asset_generate` tool at all — an unavailable gateway means\n   * the tool is hidden from `tools/list` rather than offered and then failing.\n   */\n  readonly available: boolean;\n  generateImage(input: GenerateImageInput): Promise<GenerateImageOutput>;\n}\n\nexport class GatewayDisabledError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'GatewayDisabledError';\n  }\n}\n"]}

package/dist/http/server.d.ts

@@ -0,0 +1,80 @@
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { type CorsOptions } from 'cors';
+import { type Express, type Request, type RequestHandler } from 'express';
+import { type CodesignMcpToolRegistration, createCodesignMcpServer } from '../server.js';
+import { SessionManager } from './session-manager.js';
+import type { MetricsRecorder } from '../metrics/recorder.js';
+/**
+ * Per-session state held by the SessionManager: the engine, the MCP server,
+ * and the per-session HTTP transport. Every incoming request with this
+ * session's id is routed to `transport.handleRequest`.
+ */
+export interface CodesignHttpSession {
+    id: string;
+    engine: unknown;
+    server: ReturnType<typeof createCodesignMcpServer>;
+    transport: StreamableHTTPServerTransport;
+    dispose?: () => Promise<void>;
+}
+export interface CreateCodesignHttpServerOptions {
+    assets: Record<string, string>;
+    resourceScheme?: string;
+    maxSessions: number;
+    idleTimeoutMs: number;
+    /**
+     * Resolve the front-asserted workspaceId for a new MCP session. Receives the
+     * freshly-minted session id (so `session` mode can derive `s/<id>`). May throw
+     * WorkspaceAuthError → 401. Default: a fixed "default" workspace.
+     */
+    resolveWorkspaceId?: (req: Request, sessionId: string) => string;
+    /**
+     * When set, an `initialize` request carrying this (case-insensitive) header uses
+     * its value as the MCP session id instead of minting one. The Worker/front
+     * mints the id so it can route follow-ups to the same warm instance (spec §3).
+     * The front MUST strip any client-supplied value of this header — same trust
+     * posture as the workspace header. Absent header → mint as normal.
+     */
+    trustedSessionIdHeader?: string;
+    /** Build everything needed for one session in one go. */
+    createSession: (ctx: {
+        sessionId: string;
+        workspaceId: string;
+    }) => Promise<{
+        engine: unknown;
+        tools: CodesignMcpToolRegistration[];
+        dispose?: () => Promise<void>;
+    }>;
+    /** Optional: mount additional routes (viewer router, dashboards) before MCP. */
+    mountExtras?: (app: Express) => void;
+    /**
+     * Optional metrics recorder, DI'd into every session's MCP server so tool
+     * calls are timed at the single dispatch chokepoint. Absent → no timing.
+     */
+    metrics?: MetricsRecorder;
+    /** Build identity reported as `serverInfo.version`. Default `'dev'`. */
+    buildId?: string;
+    /** Optional auth middleware — runs before MCP routing. Default: no-op. */
+    auth?: RequestHandler;
+    /** Optional CORS options. Default: disabled. */
+    cors?: CorsOptions | false;
+}
+/**
+ * Express app exposing MCP over Streamable HTTP at /mcp. Stateful sessions:
+ * each MCP `initialize` call spawns a fresh session (engine + server +
+ * transport); follow-up requests carry `Mcp-Session-Id` to route back. The
+ * underlying SessionManager enforces idle eviction and a session cap.
+ *
+ * The returned object exposes:
+ *   .listen / .use / etc.    — Express's surface (composes into larger apps)
+ *   .sessions                 — the SessionManager (testing + ops insight)
+ *   .shutdown()               — destroy every active session, dispose engines
+ */
+export interface CodesignHttpServer extends Express {
+    sessions: SessionManager<CodesignHttpSession, {
+        sessionId: string;
+        workspaceId: string;
+    }>;
+    shutdown(): Promise<void>;
+}
+export declare function createCodesignHttpServer(opts: CreateCodesignHttpServerOptions): Promise<CodesignHttpServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/http/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/http/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAa,EAAE,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAgB,EACd,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,cAAc,EAEpB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,2BAA2B,EAChC,uBAAuB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAA2B,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACnD,SAAS,EAAE,6BAA6B,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACjE;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,aAAa,EAAE,CAAC,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC1E,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,2BAA2B,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/B,CAAC,CAAC;IACH,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,gDAAgD;IAChD,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CAC5B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAmB,SAAQ,OAAO;IACjD,QAAQ,EAAE,cAAc,CACtB,mBAAmB,EACnB;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAC3C,CAAC;IACF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAyL7B"}

package/dist/http/server.js

@@ -0,0 +1,183 @@
+import { randomUUID } from 'node:crypto';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import cors from 'cors';
+import express from 'express';
+import { createCodesignMcpServer } from '../server.js';
+import { SessionCapExceededError, SessionManager } from './session-manager.js';
+import { WorkspaceAuthError } from './workspace-auth.js';
+export async function createCodesignHttpServer(opts) {
+    const resolveWorkspaceId = opts.resolveWorkspaceId ?? (() => 'default');
+    const sessionMgr = new SessionManager({
+        maxSessions: opts.maxSessions,
+        idleTimeoutMs: opts.idleTimeoutMs,
+        create: async (ctx) => {
+            if (!ctx)
+                throw new Error('createCodesignHttpServer: session context is required');
+            const id = ctx.sessionId;
+            const { engine, tools, dispose } = await opts.createSession({
+                sessionId: id,
+                workspaceId: ctx.workspaceId
+            });
+            const server = createCodesignMcpServer({
+                engine,
+                assets: opts.assets,
+                resourceScheme: opts.resourceScheme,
+                tools,
+                ...(opts.buildId ? { buildId: opts.buildId } : {}),
+                ...(opts.metrics ? { metrics: opts.metrics } : {})
+            });
+            const transport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: () => id,
+                // A client `DELETE /mcp` (graceful termination) fires this before the
+                // transport closes itself. Bridge it to the SessionManager so the slot
+                // and its engine are reclaimed immediately instead of squatting until
+                // idle eviction. Only fires on the DELETE path — not from transport
+                // `close()` during `destroy` — so there is no re-entrancy: `delete`
+                // removes the map entry first, then runs `destroy` (a redundant,
+                // idempotent second `transport.close()`).
+                onsessionclosed: (sid) => {
+                    void sessionMgr.delete(sid).catch(() => {
+                        // Already gone (idle-evicted, or a duplicate close) — nothing to do.
+                    });
+                }
+            });
+            await server.connect(transport);
+            return { id, engine, server, transport, dispose };
+        },
+        destroy: async (s) => {
+            try {
+                await s.transport.close();
+            }
+            catch {
+                // ignore — best-effort
+            }
+            try {
+                await s.server.close();
+            }
+            catch {
+                // ignore
+            }
+            // Call the session's dispose callback if provided (e.g. engine teardown).
+            try {
+                await s.dispose?.();
+            }
+            catch {
+                // ignore
+            }
+        }
+    });
+    const app = express();
+    app.sessions = sessionMgr;
+    if (opts.cors !== false) {
+        app.use(cors(opts.cors));
+    }
+    if (opts.auth) {
+        app.use(opts.auth);
+    }
+    app.use(express.json({ limit: '16mb' }));
+    /** Narrow `code` out of an unknown thrown value without `as any`. */
+    function errCode(e) {
+        return typeof e === 'object' && e !== null && 'code' in e
+            ? e.code
+            : undefined;
+    }
+    const handle = async (req, res) => {
+        const sessionId = req.header('mcp-session-id');
+        // Initialization (POST without session id) → spawn a new session.
+        if (req.method === 'POST' && !sessionId) {
+            const injected = opts.trustedSessionIdHeader
+                ? req.header(opts.trustedSessionIdHeader)?.trim() || undefined
+                : undefined;
+            const newSessionId = injected ?? randomUUID();
+            let workspaceId;
+            try {
+                workspaceId = resolveWorkspaceId(req, newSessionId);
+            }
+            catch (err) {
+                if (err instanceof WorkspaceAuthError) {
+                    res.status(401).json({
+                        jsonrpc: '2.0',
+                        error: { code: -32002, message: err.message },
+                        id: null
+                    });
+                    return;
+                }
+                res.status(500).json({
+                    jsonrpc: '2.0',
+                    error: { code: -32603, message: 'internal error' },
+                    id: null
+                });
+                return;
+            }
+            let session;
+            try {
+                session = await sessionMgr.create({
+                    sessionId: newSessionId,
+                    workspaceId
+                });
+            }
+            catch (err) {
+                if (err instanceof SessionCapExceededError) {
+                    res
+                        .status(503)
+                        .set('Retry-After', '30')
+                        .json({
+                        jsonrpc: '2.0',
+                        error: { code: -32000, message: err.message },
+                        id: null
+                    });
+                    return;
+                }
+                if (errCode(err) === 'EINVAL') {
+                    res.status(400).json({
+                        jsonrpc: '2.0',
+                        error: {
+                            code: -32602,
+                            message: err instanceof Error ? err.message : 'invalid workspaceId'
+                        },
+                        id: null
+                    });
+                    return;
+                }
+                res.status(500).json({
+                    jsonrpc: '2.0',
+                    error: { code: -32603, message: 'internal error' },
+                    id: null
+                });
+                return;
+            }
+            await session.transport.handleRequest(req, res, req.body);
+            return;
+        }
+        // Subsequent requests must carry a known session id.
+        if (!sessionId) {
+            res.status(400).json({
+                jsonrpc: '2.0',
+                error: { code: -32600, message: 'Mcp-Session-Id header required' },
+                id: null
+            });
+            return;
+        }
+        const session = sessionMgr.get(sessionId);
+        if (!session) {
+            res.status(404).json({
+                jsonrpc: '2.0',
+                error: { code: -32001, message: `unknown session: ${sessionId}` },
+                id: null
+            });
+            return;
+        }
+        sessionMgr.touch(sessionId);
+        await session.transport.handleRequest(req, res, req.body);
+    };
+    if (opts.mountExtras)
+        opts.mountExtras(app);
+    app.post('/mcp', handle);
+    app.get('/mcp', handle);
+    app.delete('/mcp', handle);
+    app.shutdown = async () => {
+        await sessionMgr.destroyAll();
+    };
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/http/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,IAA0B,MAAM,MAAM,CAAC;AAC9C,OAAO,OAKN,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,uBAAuB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA2EzD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAqC;IAErC,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAExE,MAAM,UAAU,GAAG,IAAI,cAAc,CAGnC;QACA,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,IAAI,CAAC,GAAG;gBACN,MAAM,IAAI,KAAK,CACb,uDAAuD,CACxD,CAAC;YACJ,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;YACzB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;gBAC1D,SAAS,EAAE,EAAE;gBACb,WAAW,EAAE,GAAG,CAAC,WAAW;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC;gBACrC,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,KAAK;gBACL,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAE;gBAC5B,sEAAsE;gBACtE,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,oEAAoE;gBACpE,iEAAiE;gBACjE,0CAA0C;gBAC1C,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvB,KAAK,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBACrC,qEAAqE;oBACvE,CAAC,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,0EAA0E;YAC1E,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,OAAO,EAAwB,CAAC;IAC5C,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzC,qEAAqE;IACrE,SAAS,OAAO,CAAC,CAAU;QACzB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC;YACvD,CAAC,CAAG,CAAwB,CAAC,IAA2B;YACxD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAClE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAE/C,kEAAkE;QAClE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB;gBAC1C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS;gBAC9D,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,YAAY,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC9C,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,WAAW,GAAG,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;oBACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;wBAC7C,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE;oBAClD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,OAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;oBAChC,SAAS,EAAE,YAAY;oBACvB,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;oBAC3C,GAAG;yBACA,MAAM,CAAC,GAAG,CAAC;yBACX,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC;yBACxB,IAAI,CAAC;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;wBAC7C,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACL,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EACL,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;yBAC7D;wBACD,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE;oBAClD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gCAAgC,EAAE;gBAClE,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,SAAS,EAAE,EAAE;gBACjE,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5B,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,IAAI,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE5C,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,GAAG,CAAC,QAAQ,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport cors, { type CorsOptions } from 'cors';\nimport express, {\n  type Express,\n  type Request,\n  type RequestHandler,\n  type Response\n} from 'express';\nimport {\n  type CodesignMcpToolRegistration,\n  createCodesignMcpServer\n} from '../server.js';\nimport { SessionCapExceededError, SessionManager } from './session-manager.js';\nimport { WorkspaceAuthError } from './workspace-auth.js';\nimport type { MetricsRecorder } from '../metrics/recorder.js';\n\n/**\n * Per-session state held by the SessionManager: the engine, the MCP server,\n * and the per-session HTTP transport. Every incoming request with this\n * session's id is routed to `transport.handleRequest`.\n */\nexport interface CodesignHttpSession {\n  id: string;\n  engine: unknown;\n  server: ReturnType<typeof createCodesignMcpServer>;\n  transport: StreamableHTTPServerTransport;\n  dispose?: () => Promise<void>;\n}\n\nexport interface CreateCodesignHttpServerOptions {\n  assets: Record<string, string>;\n  resourceScheme?: string;\n  maxSessions: number;\n  idleTimeoutMs: number;\n  /**\n   * Resolve the front-asserted workspaceId for a new MCP session. Receives the\n   * freshly-minted session id (so `session` mode can derive `s/<id>`). May throw\n   * WorkspaceAuthError → 401. Default: a fixed \"default\" workspace.\n   */\n  resolveWorkspaceId?: (req: Request, sessionId: string) => string;\n  /**\n   * When set, an `initialize` request carrying this (case-insensitive) header uses\n   * its value as the MCP session id instead of minting one. The Worker/front\n   * mints the id so it can route follow-ups to the same warm instance (spec §3).\n   * The front MUST strip any client-supplied value of this header — same trust\n   * posture as the workspace header. Absent header → mint as normal.\n   */\n  trustedSessionIdHeader?: string;\n  /** Build everything needed for one session in one go. */\n  createSession: (ctx: { sessionId: string; workspaceId: string }) => Promise<{\n    engine: unknown;\n    tools: CodesignMcpToolRegistration[];\n    dispose?: () => Promise<void>;\n  }>;\n  /** Optional: mount additional routes (viewer router, dashboards) before MCP. */\n  mountExtras?: (app: Express) => void;\n  /**\n   * Optional metrics recorder, DI'd into every session's MCP server so tool\n   * calls are timed at the single dispatch chokepoint. Absent → no timing.\n   */\n  metrics?: MetricsRecorder;\n  /** Build identity reported as `serverInfo.version`. Default `'dev'`. */\n  buildId?: string;\n  /** Optional auth middleware — runs before MCP routing. Default: no-op. */\n  auth?: RequestHandler;\n  /** Optional CORS options. Default: disabled. */\n  cors?: CorsOptions | false;\n}\n\n/**\n * Express app exposing MCP over Streamable HTTP at /mcp. Stateful sessions:\n * each MCP `initialize` call spawns a fresh session (engine + server +\n * transport); follow-up requests carry `Mcp-Session-Id` to route back. The\n * underlying SessionManager enforces idle eviction and a session cap.\n *\n * The returned object exposes:\n *   .listen / .use / etc.    — Express's surface (composes into larger apps)\n *   .sessions                 — the SessionManager (testing + ops insight)\n *   .shutdown()               — destroy every active session, dispose engines\n */\nexport interface CodesignHttpServer extends Express {\n  sessions: SessionManager<\n    CodesignHttpSession,\n    { sessionId: string; workspaceId: string }\n  >;\n  shutdown(): Promise<void>;\n}\n\nexport async function createCodesignHttpServer(\n  opts: CreateCodesignHttpServerOptions\n): Promise<CodesignHttpServer> {\n  const resolveWorkspaceId = opts.resolveWorkspaceId ?? (() => 'default');\n\n  const sessionMgr = new SessionManager<\n    CodesignHttpSession,\n    { sessionId: string; workspaceId: string }\n  >({\n    maxSessions: opts.maxSessions,\n    idleTimeoutMs: opts.idleTimeoutMs,\n    create: async (ctx) => {\n      if (!ctx)\n        throw new Error(\n          'createCodesignHttpServer: session context is required'\n        );\n      const id = ctx.sessionId;\n      const { engine, tools, dispose } = await opts.createSession({\n        sessionId: id,\n        workspaceId: ctx.workspaceId\n      });\n      const server = createCodesignMcpServer({\n        engine,\n        assets: opts.assets,\n        resourceScheme: opts.resourceScheme,\n        tools,\n        ...(opts.buildId ? { buildId: opts.buildId } : {}),\n        ...(opts.metrics ? { metrics: opts.metrics } : {})\n      });\n      const transport = new StreamableHTTPServerTransport({\n        sessionIdGenerator: () => id,\n        // A client `DELETE /mcp` (graceful termination) fires this before the\n        // transport closes itself. Bridge it to the SessionManager so the slot\n        // and its engine are reclaimed immediately instead of squatting until\n        // idle eviction. Only fires on the DELETE path — not from transport\n        // `close()` during `destroy` — so there is no re-entrancy: `delete`\n        // removes the map entry first, then runs `destroy` (a redundant,\n        // idempotent second `transport.close()`).\n        onsessionclosed: (sid) => {\n          void sessionMgr.delete(sid).catch(() => {\n            // Already gone (idle-evicted, or a duplicate close) — nothing to do.\n          });\n        }\n      });\n      await server.connect(transport);\n      return { id, engine, server, transport, dispose };\n    },\n    destroy: async (s) => {\n      try {\n        await s.transport.close();\n      } catch {\n        // ignore — best-effort\n      }\n      try {\n        await s.server.close();\n      } catch {\n        // ignore\n      }\n      // Call the session's dispose callback if provided (e.g. engine teardown).\n      try {\n        await s.dispose?.();\n      } catch {\n        // ignore\n      }\n    }\n  });\n\n  const app = express() as CodesignHttpServer;\n  app.sessions = sessionMgr;\n\n  if (opts.cors !== false) {\n    app.use(cors(opts.cors));\n  }\n  if (opts.auth) {\n    app.use(opts.auth);\n  }\n  app.use(express.json({ limit: '16mb' }));\n\n  /** Narrow `code` out of an unknown thrown value without `as any`. */\n  function errCode(e: unknown): string | undefined {\n    return typeof e === 'object' && e !== null && 'code' in e\n      ? ((e as { code?: unknown }).code as string | undefined)\n      : undefined;\n  }\n\n  const handle = async (req: Request, res: Response): Promise<void> => {\n    const sessionId = req.header('mcp-session-id');\n\n    // Initialization (POST without session id) → spawn a new session.\n    if (req.method === 'POST' && !sessionId) {\n      const injected = opts.trustedSessionIdHeader\n        ? req.header(opts.trustedSessionIdHeader)?.trim() || undefined\n        : undefined;\n      const newSessionId = injected ?? randomUUID();\n      let workspaceId: string;\n      try {\n        workspaceId = resolveWorkspaceId(req, newSessionId);\n      } catch (err) {\n        if (err instanceof WorkspaceAuthError) {\n          res.status(401).json({\n            jsonrpc: '2.0',\n            error: { code: -32002, message: err.message },\n            id: null\n          });\n          return;\n        }\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: { code: -32603, message: 'internal error' },\n          id: null\n        });\n        return;\n      }\n      let session: CodesignHttpSession;\n      try {\n        session = await sessionMgr.create({\n          sessionId: newSessionId,\n          workspaceId\n        });\n      } catch (err) {\n        if (err instanceof SessionCapExceededError) {\n          res\n            .status(503)\n            .set('Retry-After', '30')\n            .json({\n              jsonrpc: '2.0',\n              error: { code: -32000, message: err.message },\n              id: null\n            });\n          return;\n        }\n        if (errCode(err) === 'EINVAL') {\n          res.status(400).json({\n            jsonrpc: '2.0',\n            error: {\n              code: -32602,\n              message:\n                err instanceof Error ? err.message : 'invalid workspaceId'\n            },\n            id: null\n          });\n          return;\n        }\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: { code: -32603, message: 'internal error' },\n          id: null\n        });\n        return;\n      }\n      await session.transport.handleRequest(req, res, req.body);\n      return;\n    }\n\n    // Subsequent requests must carry a known session id.\n    if (!sessionId) {\n      res.status(400).json({\n        jsonrpc: '2.0',\n        error: { code: -32600, message: 'Mcp-Session-Id header required' },\n        id: null\n      });\n      return;\n    }\n    const session = sessionMgr.get(sessionId);\n    if (!session) {\n      res.status(404).json({\n        jsonrpc: '2.0',\n        error: { code: -32001, message: `unknown session: ${sessionId}` },\n        id: null\n      });\n      return;\n    }\n    sessionMgr.touch(sessionId);\n    await session.transport.handleRequest(req, res, req.body);\n  };\n\n  if (opts.mountExtras) opts.mountExtras(app);\n\n  app.post('/mcp', handle);\n  app.get('/mcp', handle);\n  app.delete('/mcp', handle);\n\n  app.shutdown = async () => {\n    await sessionMgr.destroyAll();\n  };\n\n  return app;\n}\n"]}

package/dist/http/session-manager.d.ts

@@ -0,0 +1,42 @@
+export declare class SessionCapExceededError extends Error {
+    readonly maxSessions: number;
+    constructor(maxSessions: number);
+}
+export declare class SessionNotFoundError extends Error {
+    readonly id: string;
+    constructor(id: string);
+}
+export interface SessionManagerOptions<T, C = void> {
+    /** Max concurrent sessions. New `create()` calls throw past this. */
+    maxSessions: number;
+    /**
+     * Sessions that have not been `touch`-ed for this long (ms) become eligible
+     * for eviction on the next `evictIdle()` call. Use a periodic timer in the
+     * HTTP server to drive eviction (this module does no scheduling itself).
+     */
+    idleTimeoutMs: number;
+    /** Construct a new session — engine bootstrap, transport wiring, etc. */
+    create: (ctx?: C) => Promise<T> | T;
+    /** Tear down a session — dispose engine, close transport. Idempotent. */
+    destroy: (session: T) => Promise<void> | void;
+}
+export interface SessionEntry<T> {
+    session: T;
+    id: string;
+    lastActivityAt: number;
+}
+export declare class SessionManager<T extends {
+    id: string;
+}, C = void> {
+    private readonly opts;
+    private readonly entries;
+    constructor(opts: SessionManagerOptions<T, C>);
+    get size(): number;
+    create(ctx?: C): Promise<T>;
+    get(id: string): T | undefined;
+    touch(id: string): void;
+    evictIdle(): Promise<string[]>;
+    delete(id: string): Promise<void>;
+    destroyAll(): Promise<void>;
+}
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/http/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/http/session-manager.ts"],"names":[],"mappings":"AAaA,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,WAAW,EAAE,MAAM;gBAAnB,WAAW,EAAE,MAAM;CAIhD;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,EAAE,EAAE,MAAM;gBAAV,EAAE,EAAE,MAAM;CAIvC;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI;IAChD,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,yEAAyE;IACzE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,cAAc,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,GAAG,IAAI;IAGhD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsC;gBAEjC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9D,IAAI,IAAI,IAAI,MAAM,CAEjB;IAEK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAajC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAI9B,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKjB,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAa9B,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAOlC"}

package/dist/http/session-manager.js

@@ -0,0 +1,82 @@
+// SessionManager — pure logic for the HTTP transport.
+//
+// Responsibilities:
+//   - Hand out session ids (`create`).
+//   - Look up active sessions (`get`).
+//   - Bump activity timestamps (`touch`).
+//   - Evict idle sessions past `idleTimeoutMs` (`evictIdle`).
+//   - Cap concurrent sessions at `maxSessions` (`create` rejects past cap).
+//   - Tear down on demand (`delete`, `destroyAll`).
+//
+// Engine + transport + server lifecycle live in caller-supplied `create` /
+// `destroy` callbacks so this file stays decoupled from CE.SDK / express.
+export class SessionCapExceededError extends Error {
+    constructor(maxSessions) {
+        super(`session cap reached (max=${maxSessions})`);
+        this.maxSessions = maxSessions;
+        this.name = 'SessionCapExceededError';
+    }
+}
+export class SessionNotFoundError extends Error {
+    constructor(id) {
+        super(`unknown session id: ${id}`);
+        this.id = id;
+        this.name = 'SessionNotFoundError';
+    }
+}
+export class SessionManager {
+    constructor(opts) {
+        this.opts = opts;
+        this.entries = new Map();
+    }
+    get size() {
+        return this.entries.size;
+    }
+    async create(ctx) {
+        if (this.entries.size >= this.opts.maxSessions) {
+            throw new SessionCapExceededError(this.opts.maxSessions);
+        }
+        const session = await this.opts.create(ctx);
+        this.entries.set(session.id, {
+            session,
+            id: session.id,
+            lastActivityAt: Date.now()
+        });
+        return session;
+    }
+    get(id) {
+        return this.entries.get(id)?.session;
+    }
+    touch(id) {
+        const entry = this.entries.get(id);
+        if (entry)
+            entry.lastActivityAt = Date.now();
+    }
+    async evictIdle() {
+        const cutoff = Date.now() - this.opts.idleTimeoutMs;
+        const evicted = [];
+        for (const [id, entry] of this.entries) {
+            if (entry.lastActivityAt < cutoff) {
+                this.entries.delete(id);
+                await this.opts.destroy(entry.session);
+                evicted.push(id);
+            }
+        }
+        return evicted;
+    }
+    async delete(id) {
+        const entry = this.entries.get(id);
+        if (!entry)
+            throw new SessionNotFoundError(id);
+        this.entries.delete(id);
+        await this.opts.destroy(entry.session);
+    }
+    async destroyAll() {
+        const all = Array.from(this.entries.values());
+        this.entries.clear();
+        for (const entry of all) {
+            await this.opts.destroy(entry.session);
+        }
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/dist/http/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/http/session-manager.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,oBAAoB;AACpB,uCAAuC;AACvC,uCAAuC;AACvC,0CAA0C;AAC1C,8DAA8D;AAC9D,4EAA4E;AAC5E,oDAAoD;AACpD,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAE1E,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAA4B,WAAmB;QAC7C,KAAK,CAAC,4BAA4B,WAAW,GAAG,CAAC,CAAC;QADxB,gBAAW,GAAX,WAAW,CAAQ;QAE7C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAA4B,EAAU;QACpC,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;QADT,OAAE,GAAF,EAAE,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAuBD,MAAM,OAAO,cAAc;IAGzB,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QAF7C,YAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEG,CAAC;IAElE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAO;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;YAC3B,OAAO;YACP,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,EAAU;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACpD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF","sourcesContent":["// SessionManager — pure logic for the HTTP transport.\n//\n// Responsibilities:\n//   - Hand out session ids (`create`).\n//   - Look up active sessions (`get`).\n//   - Bump activity timestamps (`touch`).\n//   - Evict idle sessions past `idleTimeoutMs` (`evictIdle`).\n//   - Cap concurrent sessions at `maxSessions` (`create` rejects past cap).\n//   - Tear down on demand (`delete`, `destroyAll`).\n//\n// Engine + transport + server lifecycle live in caller-supplied `create` /\n// `destroy` callbacks so this file stays decoupled from CE.SDK / express.\n\nexport class SessionCapExceededError extends Error {\n  constructor(public readonly maxSessions: number) {\n    super(`session cap reached (max=${maxSessions})`);\n    this.name = 'SessionCapExceededError';\n  }\n}\n\nexport class SessionNotFoundError extends Error {\n  constructor(public readonly id: string) {\n    super(`unknown session id: ${id}`);\n    this.name = 'SessionNotFoundError';\n  }\n}\n\nexport interface SessionManagerOptions<T, C = void> {\n  /** Max concurrent sessions. New `create()` calls throw past this. */\n  maxSessions: number;\n  /**\n   * Sessions that have not been `touch`-ed for this long (ms) become eligible\n   * for eviction on the next `evictIdle()` call. Use a periodic timer in the\n   * HTTP server to drive eviction (this module does no scheduling itself).\n   */\n  idleTimeoutMs: number;\n  /** Construct a new session — engine bootstrap, transport wiring, etc. */\n  create: (ctx?: C) => Promise<T> | T;\n  /** Tear down a session — dispose engine, close transport. Idempotent. */\n  destroy: (session: T) => Promise<void> | void;\n}\n\nexport interface SessionEntry<T> {\n  session: T;\n  id: string;\n  lastActivityAt: number;\n}\n\nexport class SessionManager<T extends { id: string }, C = void> {\n  private readonly entries = new Map<string, SessionEntry<T>>();\n\n  constructor(private readonly opts: SessionManagerOptions<T, C>) {}\n\n  get size(): number {\n    return this.entries.size;\n  }\n\n  async create(ctx?: C): Promise<T> {\n    if (this.entries.size >= this.opts.maxSessions) {\n      throw new SessionCapExceededError(this.opts.maxSessions);\n    }\n    const session = await this.opts.create(ctx);\n    this.entries.set(session.id, {\n      session,\n      id: session.id,\n      lastActivityAt: Date.now()\n    });\n    return session;\n  }\n\n  get(id: string): T | undefined {\n    return this.entries.get(id)?.session;\n  }\n\n  touch(id: string): void {\n    const entry = this.entries.get(id);\n    if (entry) entry.lastActivityAt = Date.now();\n  }\n\n  async evictIdle(): Promise<string[]> {\n    const cutoff = Date.now() - this.opts.idleTimeoutMs;\n    const evicted: string[] = [];\n    for (const [id, entry] of this.entries) {\n      if (entry.lastActivityAt < cutoff) {\n        this.entries.delete(id);\n        await this.opts.destroy(entry.session);\n        evicted.push(id);\n      }\n    }\n    return evicted;\n  }\n\n  async delete(id: string): Promise<void> {\n    const entry = this.entries.get(id);\n    if (!entry) throw new SessionNotFoundError(id);\n    this.entries.delete(id);\n    await this.opts.destroy(entry.session);\n  }\n\n  async destroyAll(): Promise<void> {\n    const all = Array.from(this.entries.values());\n    this.entries.clear();\n    for (const entry of all) {\n      await this.opts.destroy(entry.session);\n    }\n  }\n}\n"]}

package/dist/http/workspace-auth.d.ts

@@ -0,0 +1,9 @@
+import type { Request } from 'express';
+import type { ServerConfig } from '../config.js';
+/** Thrown when a required workspace claim is missing — mapped to HTTP 401. */
+export declare class WorkspaceAuthError extends Error {
+    constructor(message: string);
+}
+export type ResolveWorkspaceId = (req: Request, sessionId: string) => string;
+export declare function makeWorkspaceResolver(cfg: ServerConfig): ResolveWorkspaceId;
+//# sourceMappingURL=workspace-auth.d.ts.map

package/dist/http/workspace-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-auth.d.ts","sourceRoot":"","sources":["../../src/http/workspace-auth.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,8EAA8E;AAC9E,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;AAE7E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,kBAAkB,CAwB3E"}

package/dist/http/workspace-auth.js

@@ -0,0 +1,29 @@
+/** Thrown when a required workspace claim is missing — mapped to HTTP 401. */
+export class WorkspaceAuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WorkspaceAuthError';
+    }
+}
+export function makeWorkspaceResolver(cfg) {
+    switch (cfg.auth.mode) {
+        case 'single': {
+            const id = cfg.auth.fixedWorkspaceId;
+            if (!id)
+                throw new Error('workspace-auth: single mode requires a fixed workspaceId');
+            return () => id;
+        }
+        case 'session':
+            return (_req, sessionId) => `s/${sessionId}`;
+        case 'header': {
+            const header = cfg.auth.header;
+            return (req) => {
+                const value = req.header(header);
+                if (!value)
+                    throw new WorkspaceAuthError(`missing trusted workspace header "${header}"`);
+                return value;
+            };
+        }
+    }
+}
+//# sourceMappingURL=workspace-auth.js.map

package/dist/http/workspace-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-auth.js","sourceRoot":"","sources":["../../src/http/workspace-auth.ts"],"names":[],"mappings":"AAcA,8EAA8E;AAC9E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAID,MAAM,UAAU,qBAAqB,CAAC,GAAiB;IACrD,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACrC,IAAI,CAAC,EAAE;gBACL,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;YACJ,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QAC/C,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,OAAO,CAAC,GAAG,EAAE,EAAE;gBACb,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,CAAC,KAAK;oBACR,MAAM,IAAI,kBAAkB,CAC1B,qCAAqC,MAAM,GAAG,CAC/C,CAAC;gBACJ,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["// packages/codesign-mcp/src/http/workspace-auth.ts\n//\n// The auth seam (spec §3, §8.7). The container does NOT verify tokens — it\n// trusts a pre-verified, front-asserted workspaceId and derives storage scope\n// from it. This module turns the configured mode into a pure\n// `resolveWorkspaceId(req, sessionId)` function:\n//   - header : trust a front-injected header (the front strips any client value)\n//   - session: ephemeral `s/<sessionId>` (no front; the unguessable session id\n//              acts as a bearer capability — a private scratchpad)\n//   - single : a fixed id (single-tenant on-prem / local dev)\n// The returned id is opaque; ScopedWorkspaceFS sanitises it before use.\nimport type { Request } from 'express';\nimport type { ServerConfig } from '../config.js';\n\n/** Thrown when a required workspace claim is missing — mapped to HTTP 401. */\nexport class WorkspaceAuthError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'WorkspaceAuthError';\n  }\n}\n\nexport type ResolveWorkspaceId = (req: Request, sessionId: string) => string;\n\nexport function makeWorkspaceResolver(cfg: ServerConfig): ResolveWorkspaceId {\n  switch (cfg.auth.mode) {\n    case 'single': {\n      const id = cfg.auth.fixedWorkspaceId;\n      if (!id)\n        throw new Error(\n          'workspace-auth: single mode requires a fixed workspaceId'\n        );\n      return () => id;\n    }\n    case 'session':\n      return (_req, sessionId) => `s/${sessionId}`;\n    case 'header': {\n      const header = cfg.auth.header;\n      return (req) => {\n        const value = req.header(header);\n        if (!value)\n          throw new WorkspaceAuthError(\n            `missing trusted workspace header \"${header}\"`\n          );\n        return value;\n      };\n    }\n  }\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export * as engine from './engine/index.js';
+export * as gateway from './gateway/index.js';
+export { createCodesignHttpServer } from './http/server.js';
+export * as revisions from './revisions/index.js';
+export type { CodesignMcpServerOptions, CodesignMcpToolRegistration } from './server.js';
+export { createCodesignMcpServer } from './server.js';
+export { buildDesignToolRegistrations } from './tools/index.js';
+export * as viewer from './viewer/index.js';
+export * as workspace from './workspace/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,YAAY,EACV,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// packages/codesign-mcp/src/index.ts
+export * as engine from './engine/index.js';
+export * as gateway from './gateway/index.js';
+export { createCodesignHttpServer } from './http/server.js';
+export * as revisions from './revisions/index.js';
+export { createCodesignMcpServer } from './server.js';
+export { buildDesignToolRegistrations } from './tools/index.js';
+export * as viewer from './viewer/index.js';
+export * as workspace from './workspace/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AAErC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAKlD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC","sourcesContent":["// packages/codesign-mcp/src/index.ts\n\nexport * as engine from './engine/index.js';\nexport * as gateway from './gateway/index.js';\nexport { createCodesignHttpServer } from './http/server.js';\nexport * as revisions from './revisions/index.js';\nexport type {\n  CodesignMcpServerOptions,\n  CodesignMcpToolRegistration\n} from './server.js';\nexport { createCodesignMcpServer } from './server.js';\nexport { buildDesignToolRegistrations } from './tools/index.js';\nexport * as viewer from './viewer/index.js';\nexport * as workspace from './workspace/index.js';\n"]}

package/dist/metrics/mount.d.ts

@@ -0,0 +1,11 @@
+import type { Express } from 'express';
+import type { MetricsRecorder } from './recorder.js';
+export interface MountMetricsOptions {
+    recorder: MetricsRecorder;
+    /** The session/RAM cap (ServerConfig.maxEngines) — the gauge denominator. */
+    maxSessions: number;
+    /** Live active-session count, read at request time. */
+    activeSessions: () => number;
+}
+export declare function mountMetricsEndpoints(app: Express, opts: MountMetricsOptions): void;
+//# sourceMappingURL=mount.d.ts.map

package/dist/metrics/mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../src/metrics/mount.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,eAAe,CAAC;IAC1B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,mBAAmB,GACxB,IAAI,CAUN"}

package/dist/metrics/mount.js

@@ -0,0 +1,13 @@
+import { createDashboardRouter } from '../dashboard/router.js';
+export function mountMetricsEndpoints(app, opts) {
+    app.get('/metrics', (_req, res) => {
+        res.json({
+            ...opts.recorder.snapshot(),
+            activeSessions: opts.activeSessions(),
+            maxSessions: opts.maxSessions,
+            uptimeMs: Math.round(process.uptime() * 1000)
+        });
+    });
+    app.use('/dashboard', createDashboardRouter());
+}
+//# sourceMappingURL=mount.js.map

package/dist/metrics/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../src/metrics/mount.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAW/D,MAAM,UAAU,qBAAqB,CACnC,GAAY,EACZ,IAAyB;IAEzB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["// packages/codesign-mcp/src/metrics/mount.ts\n//\n// Mounts the metrics surface — GET /metrics (JSON) + the /dashboard SPA — onto\n// an Express app. Factored out of the HTTP composition root so the route and\n// its merged-snapshot shape are unit-testable without booting a real engine.\n// The route reads server-level facts (active sessions, uptime) LIVE at request\n// time; the recorder owns only the per-tool/memory state.\nimport type { Express } from 'express';\nimport { createDashboardRouter } from '../dashboard/router.js';\nimport type { MetricsRecorder } from './recorder.js';\n\nexport interface MountMetricsOptions {\n  recorder: MetricsRecorder;\n  /** The session/RAM cap (ServerConfig.maxEngines) — the gauge denominator. */\n  maxSessions: number;\n  /** Live active-session count, read at request time. */\n  activeSessions: () => number;\n}\n\nexport function mountMetricsEndpoints(\n  app: Express,\n  opts: MountMetricsOptions\n): void {\n  app.get('/metrics', (_req, res) => {\n    res.json({\n      ...opts.recorder.snapshot(),\n      activeSessions: opts.activeSessions(),\n      maxSessions: opts.maxSessions,\n      uptimeMs: Math.round(process.uptime() * 1000)\n    });\n  });\n  app.use('/dashboard', createDashboardRouter());\n}\n"]}